Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f74c0b218f...cb.dll

windows7-x64

10

f74c0b218f...cb.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f74c0b218f5d750657bca8174f3611bc013191b0cb18d7e690e5bbd6925fb8cb

  • Size

    51KB

  • Sample

    240428-x2m2safc7x

  • MD5

    57650e21d89e5518916e9b3d01408185

  • SHA1

    560a0205d39d5accb06f0012ab3046d23589a66f

  • SHA256

    f74c0b218f5d750657bca8174f3611bc013191b0cb18d7e690e5bbd6925fb8cb

  • SHA512

    67330063d020cb7f55bbce107fb6861e9bd259f45c8a4e9bbbeb33f259a49983230d466ad856511f0eec245e408060a2d6ffb19a7039000967b00b16b579ccf2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLzJYH5:1dWubF3n9S91BF3fbofJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f74c0b218f5d750657bca8174f3611bc013191b0cb18d7e690e5bbd6925fb8cb

    • Size

      51KB

    • MD5

      57650e21d89e5518916e9b3d01408185

    • SHA1

      560a0205d39d5accb06f0012ab3046d23589a66f

    • SHA256

      f74c0b218f5d750657bca8174f3611bc013191b0cb18d7e690e5bbd6925fb8cb

    • SHA512

      67330063d020cb7f55bbce107fb6861e9bd259f45c8a4e9bbbeb33f259a49983230d466ad856511f0eec245e408060a2d6ffb19a7039000967b00b16b579ccf2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLzJYH5:1dWubF3n9S91BF3fbofJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks